403 - Forbidden when attempting to connect Bamboo to JIRA as a User Server
Platform Notice: Data Center Only - This article only applies to Atlassian products on the Data Center platform.
Note that this KB was created for the Data Center version of the product. Data Center KBs for non-Data-Center-specific features may also work for Server versions of the product, however they have not been tested. Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Except Fisheye and Crucible
Summary
Attempting to connect to Jira as a user repository (using Jira's User Server function) fails with the following message in the UI – the password is correct:
Failed to change the active user repository: com.atlassian.crowd.exception.ApplicationPermissionException: Forbidden (403) Encountered a "403 - Forbidden" error while loading this page. Go to JIRA home
Diagnosis
The following appears in the $BAMBOO_HOME/logs/atlassian-bamboo.log
1
2
3
4
5
6
7
8
9
10
2016-07-20 14:15:39,010 ERROR [http-apr-8085-exec-23] [DefaultUserAccessor] Error in getUser():com.atlassian.crowd.exception.ApplicationPermissionException: Forbidden (403) Encountered a "403 - Forbidden" error while loading this page. Go to JIRA home
com.atlassian.user.EntityException: com.atlassian.crowd.exception.ApplicationPermissionException: Forbidden (403) Encountered a "403 - Forbidden" error while loading this page. Go to JIRA home
at com.atlassian.crowd.integration.atlassianuser.UserGroupCache.fetchAndSetSnapshot(UserGroupCache.java:110)
at com.atlassian.crowd.integration.atlassianuser.UserGroupCache.get(UserGroupCache.java:143)
at com.atlassian.crowd.integration.atlassianuser.CrowdUserManager.getUser(CrowdUserManager.java:29)
at com.atlassian.user.impl.delegation.DelegatingUserManager.getUser(DelegatingUserManager.java:73)
...
Caused by: com.atlassian.crowd.exception.ApplicationPermissionException: Forbidden (403) Encountered a "403 - Forbidden" error while loading this page. Go to JIRA home
... 240 moreCause
The following are possibilities:
JIRA does not include Bamboo server IP address in Allowing Other Applications to Connect to JIRA for User Management settings or has not Configuring the Whitelist "localhost" if both applications are installed on the same server.
The IP address of to the incoming request from Bamboo to Jira is the address of the load balancer / reverse proxy in-front of Jira that is forwarding the request, not the IP Address of the Bamboo Server.
There is a proxy or firewall that blocks such access from Bamboo to Jira.
Solution
Ensure that the Bamboo server URL (or IP address) has been added to Allowing Other Applications to Connect to JIRA for User Management connector or Configuring the Whitelist.
If you see that you are still getting the same error, please check the Tomcat access logs in
$JIRA-INSTALL/logs/access_log.yyyy-mm-dd for the correct source IP addresses.
Ensure that the IP Address of the load balancer or reverse proxy in-front of JIRA has also been whitelisted against the Bamboo application defined at Jira Administration >> User Management >> JIRA User Server >> Edit
Configure any proxy or firewall (rules blocking the access, NAT or PAT etc.) that might block such access. You might want to follow this method Configuring Web Proxy Support for Confluence or review the rules in your firewall or even the logs to see if these packages are being dropped. Try bypassing the proxy. For instance, if both JIRA and Bamboo are on the same server, use
127.0.0.1to connect. From Connecting to Crowd or Jira for User Management:"Go to your Jira administration screen and define the Bamboo application to Jira", item 5, configure the following IPs:
1 2 3127.0.0.1 ::1 your.hostname"Set up the Jira user directory in Bamboo", item 4, configure http://127.0.0.1:port/context_path on the "Server URL" settings.
Alternatively, use the IPs of Bamboo and Jira if they have a direct connection to each other through the network.
Use the instructions in the resolution of the following KB if updating the IP address in Jira fails to work:
Bamboo lost connection to the external user directory preventing users from logging in
Was this helpful?